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(54) iVIethod and apparatus for device management, and internet service provision method 



(57) Only a management console is installed in a 
company, so that the company is relieved of its respon- 
sibility for providing for the complicated operation of a 
management server. And since the fee that an iSP may 
charge for providing a device management service for 
multiple companies can be split among the relevant 
companies, the expense incun'ed by each company can 
be reduced. 

A network system comprises: general management 
consoles 9, which are connected to the Internet 8; a su- 



pervisor management console 4, which can be ac- 
cessed by a devbe management server 2; a database 
5, which is connected to the device management server 
2, wherein company data, correlated with each general 
management console 9, and device data, for each de- 
vice 10 con^elated with the company data, are stored; a 
console manager 3, for relaying the data processing; 
and means for referring to the company data and the 
device data to pennit the con'elated general manage- 
ment console to provide a con^elated service or device 
or group. 
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Description 

Field of the Invention 

5 [0001] The present Invention relates to a connputer network, a system and a method for providing a service using a 
computer network. More specifically, the present invention pertains to a technique that can be effectively used for a 
system supporting a general management operation, which manages groups of devices connected to an external 
network. 

10 Background Art 

[0002] Internet marketing has grown and Its development has continued until today net sources offer a great variety 
of goods and services. But not all goods are eagerly sought after; Intemet end users (consumers) tend to demand 
goods having higher added values. In addition, many such consumers, or users, are not Intimately familiar with the 

15 operation of personal computers; their ranks include a considerable number of so-called beginners for whom the In- 
stallation of application software, or the need to perform the detailed setup of an operating system for a personal 
computer, constitutes a large and unwanted load. Furthenmore, a need exists for means to distinguish between com- 
peting companies that provide goods or services via the Intemet, and to thus Identify sources whose goods or services 
differ or that provide more attractive or additional sen/Ices, and to obtain more computer users (enlarge the customer 

20 base). 

[0003] A system that includes devices connected to a LAN can manage these devices using a system management 
tool. The system management tool makes possible the installation of application software and the setting of details for 
the device. For a conventional system management tool, it is typical for devices to be connected using a LAN, and.a 
management console for managing the device will be connected to the same network as a management server, as 

25 part of an enterprise's internal data processing. Furthemiore, since the operation of the system is supposed to be 
limited to a single company, the system does not include a function that enables each one of multiple management 
consoles to administer and control the access of a managed device. A general setup Is established for a management 
console for the management of all the devices. And in addition, since the management console is supposed to be 
connected via a LAN, the level of the security provided by the management console and the server can be ascertained 

30 only by employing a user verif cation that Includes a user ID and a password. 

[0004] However, when a company employs the Intemet to provide for a consumer, or a user, a service having a 
higher added value, according to the conventional technique, the company must construct therein a device manage- 
ment console and a device management server before establishing a connection to the Internet. Since companies, 
especially middle sized and small companies, must themselves perfomn the initial construction of management systems 

35 and the operation of management servers, increases in the loads Imposed on them constitutes a critical problem. 
[0005] On the other hand, if a company desires to bonx»w part of a conventional network and to entrust an agent 
with the operation of the system, conventionally, a function for managing the accessing of a managed device is not 
provided for each of a number of multiple management consoles, and thus, they can not respond to the needs of a 
company that manages a specific device group. Furthemnore, since the management console is supposed to be con- 

40 nected to a LAN, the security between the management console and the management server can be ascertained only 
through user verification, for which a user ID and a password are employed, and therefore, while taking security Into 
account, the connection of a management console to a server via an external network is not a preferable arrangement. 

SUMMARY OF THE INVENTION 

45 

[0006] According to a first aspect of the present Invention, a network system for using a device management server 
to manage devices connected to a computer network comprises: general management consoles connected to the 
computer network; a supervisor management console accessible by the devfce management server, a database, con- 
nected to the device management server, that indudes enterprise data associated with each of the general manage- 
so ment consoles and the device data associated with the enterprise data for each of the devices; a console manager for 
the intennediate transfer of data between the general management consoles or the supervisor management console 
and the database; and means for ref enring to the enterprise data and the device data to pemri it the general management 
consoles to offer a service for the devices, or an associated group thereof. 

[0007] The present invention enables a system configuration In which only a management console Is installed In a 
55 company, so that it is not necessary for companies to perfonn the complicated operations that can be provided by a 
management server. For example, when a device management server is Installed at a specific ISP (Internet Servtee 
Provider), the ISP can provide a charge based device management service for multiple companies, and individual 
company expenses can be reduced. 
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[0008] The present invention also enabies multiple companies to share the same device management server and 
the same database server, and to distribute software to or provide device settings or other services for only those 
devices that are managed by the respective companies, I n short, relative to devices, the access management of multiple 
consoles is supported. This arrangement can be used to inhibit the setting of devices managed by other companies. 
5 [0009] The present invention can be used to enforce security between a management console and a management 
server and to employ the management console via an external network. 

[0010] A profile data associated with the service is preferably included in the database, and the console manager 

includes means for pemnitting the general management consoles to access the profile data. 

[0011] Further, job data associated with the profile data is preferably included in the database, and the networl< 

10 system further comprises means, when the devices are connected to the device management server, for searching 
for data and for requesting services associated with the device data available at the devices. 
[0012] In addition, management data associated with each of the general management consoles is preferably In- 
cluded in the database, and the network system further comprises means for, when the general management console 
logs In the device management sewer, examining an administrator using the enterprise data and the management data. 

15 [0013] The supervisor management console is pennitted to access, register, change or delete device data associated 
with all the devces, enterprise data, management data, profile data or job data. 

Detailed Description of Pretended Embodiment 

20 [0014] The preferred embodiment of the present invention will now be described in detail, by way of example only, 
while referring to the accompanying drawings in which: 

Fig. 1 is a diagram Illustrating an overview of a network system according to one embodiment of the present 
invention. 

25 

Fig. 2 is a detailed functional diagram showing the system according to the embodiment. 

Fig. 3 is a diagram showing a console manager database structure. 

30 Fig. 4 is a diagram showing the relationship between device groups and service groups. 

Fig. 5 is a diagram showing the processing perfomried when a supen/isor management console issues a request 
to a device management server, and the server responds to this request. 

35 Fig. 6 is a diagram showing the processing perfonned when a general management console issues a request to 

a device management server, and the server responds to this request.' 

Fig. 7 is a diagram showing the processing perfonned when the device of an end user issues a request to a device 
management server, and the server responds to this request. 

40 

[0015] Note that the same reference numerals are used throughout the embodiment to denote con-esponding or 
Identical components. 

[001 6] In this embodiment, a nnethod or a system will be explained; however, as will be obvious to one having ordinary 
skill in the art, the present invention can be implemented not only as a system but also as a storage medium for storing 

45 computer-readable program code. Therefore, this invention can be employed as a hardware or a software application, 
or as a combination of the two. An exanple storage medium that is provided for the storage of program code can be 
any computer-readable medium, such as a hard disk, a CD-ROM, or an optical or a magnetic storage device. 
[0017] An ordinary computer system that can be employed as a server, such as a system management server, or 
as a user device comprises: a central processing unit (CPU), a main memory (RAM) and a nonvolatile memory (ROM), 

so all of which are Interconnected by a bus. In addition, a coprocessor, an image accelerator, a cache memory and an 
input/output controller (IVO) can also be directly connected to the bus, while an external storage device, a data input 
device, a display device and a communfcation controller, hardware resources with which a computer system is generally 
equipped, can be connected via appropriate interfaces. An example external storage device is a hard disk, although 
a magneto-optical storage device, an optical device or a semiconductor storage device, such as a flash memory, can 

55 also be used, and even a read-only memory medium, such as a CD-ROM, can be considered to be an external storage 
device when employed for the reading of data or of programs. The data input device is a keyboard or a pointing device, 
such as a mouse, or it may be a voice Input device or an image reader, such as a scanner. And the display device Is 
a CRT, a liquid crystal display device, or a plasma display device. As computer systems, a variety of types of computers 
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can be used, including personal computers, workstations and naain frames that are connected to a LAN or to the 
Internet, or to another network type. A communication line used for such a connection may be either a special line or 
a public network line. A radio network may also be employed. 

[0018] The servers, the consoles or the devices need not be implemented by a single system, and may be distributed 
5 among a plurality of systems. That is, one part of a program can be processed by the computer of a user and the other 
part of the program can be processed by a remote computer. Further, it does not matter in which computer the data 
used for a program is stored. That is, so long as information concerning the location of data (an address) is available 
and the data can be used, on a computer network, the location at which data or a program is stored can be arbitrarily 
detennlned. A well known communication technique can be applied forcommunication between the network computers, 
10 and a standard protocol, such as TCP/IP or HTTP, can be employed. The location (address) of each file (data or 
program) stored In each storage device can be specified by using a DNS or a URL. It should be noted that the temn 
"Internet" in this specification includes the Intranet and the Extranet. Internet access includes Intranet or Extranet 
access. 

15 1 , System configuration 

[0019] Rg. 1 is a diagram showing an overview of the network system according to this embodiment, and Fig. 2 is 
a detailed functional diagram used for explaining the system. 

[0020] The network system of this embodiment comprises: an ISP (Internet Service Provider) 1 installed device 
20 management server 2, a console manager 3, a supervisor management console 4, a DMS (Device Management Serv- 
er) database 5, an application server 6, a PC (Personal Computer) plug-in 7, an external network 8 that connects 
together general management consoles 9 installed at companies, and client devices 1 0, for which a device management 
service is provided, in which device agents 11 are installed. 

[0021] The ISP 1 is the enterprise that, in accordance with the embodiment, provides a device management service. 
25 The device management server 2 includes the HTTP server 6 for verification processing, an application server 13 for 
web control, the PC plug-in 7, a device management servlet 14, an AP1 12, the console manager 3, and an integration 
toot kit 17. 

[0022] The console manager 3 accepts requests from the supervisor management console 4 and the general man- 
agement consoles 9, which are distributed among the individual companies, and, while controliing access, relays re- 
30 quested operations for transmission to the database 5. 

[0023] The supervisor management console 4, installed in the ISP 1 , perfomns management processes, such as the 
registering of the general management consoles 9, and manages an enterprise ID and an administrator ID that are 
allocated for each company. The supervisor management console 4 also provides management control for each device 
10. 

35 [0024] The database 5 includes a console management database 20, required for the management of the general 
management consoles 9, a device management database 19, required for the management of the devices 10, and a 
job database 1 8, required for job management. The database 5 is operated via the AP1 1 2, which includes a job API 
21 and a device management API 22. 

[0025] The general management consoles 9, which are installed at companies, are used by company administrators 
40 to provide device management for the client devices 1 0 that are installed at their companies. 

[0026] The console manager 3, which is the servlet 1 5 on the HTTP server, accepts HTTP requests from the man- 
agement consoles 4 and 9, and returns processing results as HTTP responses. SSL client verification Is required for 
communication between the management consoles 4 and 9 and the console manager 3, and the processing on the 
client side is performed by an SSL library stored in the console. The SSL process on the server 4 side is performed, 
45 for example, by the application server 6. The console manager 3 includes a table group (console management data- 
base) that is added to the DMS database 5 and a module (console manager business object 16) for accessing the 
table group. 

[0027] In the network system for this invention, after a devfce has been verified by the SSL, administrator verification 
is performed when the consoles 4 and 9 are logged in. The administrator verification function is a function whereby an 

50 examination is perfonmed to determine whether a user of the console 4 or 9 is an authorized administrator, and if a 
request is submitted by an unauthorized administrator the console manager 3 will reject rt. The entries that must be 
input for verification are, for example, an administrator ID, an administrator password and an enterprise ID. It should 
be noted that the enterprise ID is automatically read from an ID file that is distributed to each company. 
[0028] The administrator verification process is performed by examining the ENTERPRISE table and the ADMINIS- 

55 TRATOR table in the database 5, and when an administrator has been verified, the console manager 3 stores the 
enterprise ID and the administrator ID in congelation with the session, and notifies the consoles 4 and 9 that the process 
was successful. Thereafter, the legality of the request issued by a console can be determined by examining the IDs 
that are correlated with the session, and the database resource access can be controlled. This right of access is 
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separately provided for each enterprise, and a successful verification is valid throughout the session for which the 
process was performed. When, however, the verification process is unsuccessful, or If a request has been issued by 
an unauthorized person, the console nnanager 3 terminates the session and severs the communication connection. 
Administrative control of a session can be exercised by issuing a verification ticlcet with an expiration time to the man- 

5 agement consoles 4 and 9 when they are logged on, and by thereafter using the verification ticket as the session ID. 
[0029] The services registered in the database 5 are distributed to the devices 10. For this distribution, a pull type 
service is provided when the device 1 0 is connected to the DMS 2 of the ISP 1 . That is, the device 1 0 can search the 
job management database that is correlated with this device, and can download, and thus receive, the service that is 
registered for it. In this case, the service is downloaded through the PC plug-in 7 and the PC device agent 11 . 

10 [0030] With this system configuration, a company can provide a device service for a device it administers without 
having to prepare a company specific system. Further, the company can employ the general management console to 
provide not only a service prepared by the system but also a unique sen/ice for the device that it administers. And a 
system provider (an enterpriser) can increase the use of the system not only by common device users but also by 
companies, and can, through the companies, obtain more device users. Thus, the system of the invention can benefit 

15 device users by providing them additional services. 

2. Database configuration 

[0031 ] The structure of the console manager database 20 of this system will now be described. The console manager 
20 3 and its database 20 are so designed that they can control the supervisor management console 4 and the general 

management console 9. The companies and the administrators, including an enterpriser and a supervisor administrator, 

are managed by the database 20. When the administrator of a company desires to issue a request to the console 

manager 3, his or her status must be verified at log-on time. Thus, since not only the device management but also the 

administrator verification is perfomned, the system security can be improved. 
25 [0032] After being verified, an administrator can proceed to perfomri his or her job, while the console manager 3 

controls system accesses so that the administrator can not access the resources of another company. It should be 

noted that this limitation does not apply to a supervisor administrator. 

[0033] The console manager database 20 for this system will now be explained. Fig. 3 Is a diagram showing the 
structure of the console manager database 20. 

30 [0034] In this system, the devices 1 0 of users can be sorted into groups, corresponding to their respective companies, 
in accordance with the sen/ices that they can receive. That is, a device 1 0 that is controlled by a company may belong 
to a service group In that company. Thus, devices 10 can be fomned into groups so long as they are managed by the 
same company and receive the same services, and each device can belong to multiple device groups within the com- 
pany. This relationship concept Is shown in Fig. 4, in which the relationships existing between devices and service 

35 groups is represented. 

[0035] A service group consists of available services. After a device has been registered, thenceforth the device 
belongs to a specific service group, which means that the device is capable of receiving the services allocated for that 
service group. That is, the service group indirectfy represents a set of devices that can provide predetemiined services. 
Sen/ice groups are set up by a supervisor administrator, and a specific service group can be set up for multiple conn- 
40 panies at the same time, so long as the limitations imposed by company boundaries are observed. The database 20 
is so designed that it can be used to manage the above described groups. 

[0036] The job of the device management server (DMS) of this Invention Is perfomned for each device. Therefore, 
the jobs must be fomned into groups in order to support the jobs for the device groups. The database 20 manages the 
job groups. 

^5 [0037] A job profile prepared by the administrator of a company is managed by the database 20. The concept of the 
service is finally mapped into the concept of the DMS, which is the job. The contents of the jobs are then written in the 
job profile, and are coo'elated with the respective services. 

[0038] The table arrangement of the console manager database 20 will now be described. While taking into account 
the affinity of the device management server (DMS), the tables are designed to supplement the standard table structure 
50 of the device management server. "Device Management DB" and "Job Management DB" in Fig. 3 are databases 
managed by the device management server. The details for the tables In the database 20 are as follows. 

2-1. ENTERPRISE table 

55 [0039] An ENTERPRISE table holds the list of companies. Table 1 is an example ENTERPRISE table. The details 
for fields are as follows. 
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Table 1 



Name 


Type 


Size 


Required 


Example 


ENTERPRISEJD(PK) 


integer 




Y 


1000 


ENTERPRISE_SIG 


varchar 


64 


Y 


"jooor 


ENTERPRISE_NAME 


varchar 


255 


Y 


"ABC, Japan, Ltd." 


SUPERVISOR 


char 


1 


Y 


■Y' 



[0040] ENTERPRISEJD: This Is an in-house ID number cxin^spondlng to each company, and Is used mainly for the 
internal database process. When the supervisor administrator prepares and registers a company entry, a unique 
ENTERPRISE_ID is automatically generated for the ENTERPRISE table. 

[0041] ENTERPRISE_SIG: This is a unique identification name for a company in the ENTERPRISE table. The 

ENTERPRISE_SIG is allocated for each company by the supervisor administrator. 

[0042] ENTERPRISE_NAME: This is the unique name of a company in the ENTERPRISE table. 

[0043] SUPERVISOR: This represents a company that is an enterpriser. Character "Y" represents an enterpriser, 

and the other character represents an entire company. An enterprise can not include multiple companies. 

2-2. ADMINISTRATOR table 

[0044] An ADMINISTRATOR table holds the list of administrators. Table 2 is an example ADMINISTRATOR table. 
The details for the fields are as follows. 



Table 2 



Name 


Type 


Size 


Required 


Example 


ADMINJD(PK) 


integer 




Y 


1000 


ADMIN_UID 


varchar 


64 


Y 


"Ichiro" 


ADMIN_PASSWORD 


varchar 


255 


Y 


(binary) 


ADMINJNFO 


varchar 


512 


N 


Tokkyo Ichiro 
T6l/Fax:045-123-4567" 


ENTERPRISE_ID(FK) 


integer 




Y 


1000 



[0045] ADMINJD: This is an in-house ID number comesponding to each administrator, and is used mainly for the 
intemal database process. When a supervisor administrator prepares and registers an administrator entry, a unique 
ADMINJD is automatically generated for the ADMINISTRATOR table. 

[0046] ADM1N_UID: This is the unique identification name of an administratorthat is entered in the ADMIN ISTRATOR 
table. 

[0047] ADMIN_PASSWORD: This is the password for an administrator. A unit that is not in plain text is obtained, for 
example, by perfomning a uni-directional hash function and is stored. 
[0048] ADMIN_INFO: This is infomnation for an administrator. 

[0049] ENTERPRISEJD: This represents a company to which an administrator belongs, and indicates an 
ENTERPRISEJD that is entered in the ENTERPRISE table. When a member company is an enterprise, the adminis- 
trator sen/es as a supervisor administrator 

2-3. SERVICE table 

[0050] A SERVICE table holds the list of services. Table 3 is an example SERVICE table. The details for the fields 
are as follows. 



Table 3 



Name 


Type 


Size 


Required 


Example 


SERVICEJD(PK) 


integer 




Y 


1000 
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Table 3 (continued) 



Name 


Type 


Size 


Required 


Example 


SERVICE_SIG 


varchar 


64 


Y 


"INTERN ET.BUTTON.SETTING" 


DEVICE_CLASS_NAME 


varchar 


256 


Y 


"PC Type 1" 



[0051] SERVICEJD:This is an in-house ID number con-espon ding to each service, and is used mainly for the Internal 
database process. When a supervisor administrator prepares and registers a service entry, a unique SER\/ICE_ID is 
10 automatically generated for the SERVICE table. 

[0052] SERVICE_SIG; This is the identification name for a service. A pair consisting of a unique SERVICE_SIG and 
a unique DEVICE_CL^S_NAME Is entered in the SERVICE table. 

[0053] DEVICE_CI_ASS_NAME: This is the name of a device class. The device class is one part of the PC plug-in, 
and handles communications with a device. 

13 

2-4. SERVICE_GROUP table 

[0054] A SERVICE_GROUP table holds the list of service groups. Table 4 is an example SERVICE_GROUP TABLE. 
The details for the fields are as follows. 

20 

Table 4 



Name 


Type 


Size 


Required 


Example 


SERVICE_GROUPJD(PK) 


integer 




Y 


1000 


SERVICE_GROUP_SIG 


varchar 


64 


Y 


"SERVICE.GROUP.I" 



[0055] SERVICE_GROUP_ID: This is an in-house ID number corresponding to each service group, and is used 
mainly for the internal database process. A unique SERVICE_GROUP_lD is automatically generated for the 
SERVICE_GROUP table when the supervisor administrator prepares and registers a service group. 
30 [0056] SERVICE_GROUP_SIG: This Is the identification name of a service group, and must be a unique entry In the 
SERVICE_GROUP table. 

2-5. GROUPED_SERVICES table 

^5 [0057] A GROLIPED_SERVICES table is used to correlate a service and a service group. Table 5 Is an example 
GROUPED_SERVICES table. 



Tables 



Name 


Type 


Size 


Required 


Example 


SERVICE_ID(FK) 


integer 




Y 


1000 


SERVICE_GROUPJD(FK) 


integer 




Y 


1000 



[0058] SERVICEJD: This indicates the SERVICEJD in the SERVICE table. A pair consisting of a unique 

SERVICEJD and a unique SERVICE_GROUP_ID is entered in the GROUPED_SERVICES table. 

[0059] SERViCE_GROUP_ID: This indicates the SERVICE_GROUP_ID in the SERVICE_GROUP table. 

2-6. JOB_PROFILE table 

[0060] A JOB_PROFILE table holds a list of job profiles. Table 6 is an example JQB_PROFILE table. 



Table 6 



Name 


Type 


Size 


Required 


Example 


JOB_PROFILE_ID(PK) 


integer 




Y 


1000 


JOB_PROFILE_NAME 


varchar 


255 


Y 


"distribute cherry-blossom stonn icon" 
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Table 6 (continued) 



10 



Nflpne 


TVD© 


Size 


Required 


Example 


JOB_PROFILE_CONTENTS 


varchar 


1024 


Y 


"filey//jobres/J001/1000/chen7dist,pkg" 


JOB_PROFILEJNFO 


varchar 


512 


N 


"... in order to distribute spring icon" 


SW.ID 


long 




N 


1000000 


SERVICE_ID(FK) 


Integer 




Y 


1000 


ENTERPRISEJD(FK) 


integer 




Y 


1000 


LAST_MODIFIED 


date 




Y 


(date and time) 



[0061] JOB_PROFILE_ID: This is an in-house ID number coaesponding to each job profile, and is used mainly for 
the internal database process. A unique JOB_PROFILE_ID is automatically generated for the JOB_PROFILE table 
when the entry of a job profile is prepared and registered. 

[0062] JOB_PROFILE_NAME: This is the name of a job profile. A pair consisting of a unique JOB_PROFILE_NAME 
and a unique ENTERPRISEJD is entered in the JOB_PROFILE table. 

[0063] JOB_PROFILE_CONTENTS: These are the contents of a job profile. For example, the URL for a package 
file used for a job is stored here. 

[0064] JOB_PROFILE_INFO: This is Infomnation concerning a job profile, and is arbitrarily set In this field, 
[0065] SWJD: This indicates the SWJD In the SOFTWARE table in the DMS. 
[0066] SERVICE JD: This indicates the SERVICEJD In the SERVICE table. 

[0067] ENTERPRISE_ID:Thls represents a company that has a job profile, and indicates the ENTERPRISEJD that 
is entered in the ENTERPRISE table. 

[0068] LJVST_MODIFIED: This Is the latest date on which a job profile was updated. 
2-7. JOB_GROUP table 

[0069] A JOB_GROUP table holds a list for a job group. Table 7 shows an example JOB_GROUP table. 



Table 7 



Name 


Type 


Size 


Required 


Example 


JOB_GROUPJD(PK) 


long 




Y 


1000 


JOB_GROUP_NAME 


varchar 


255 


Y 


"distribute icon to line for Mr. ochimizu" 


JOB_GROUPJNFO 


varchar 


512 


N 


"Yamato 1st floor, Yamato 2nd floor" 


JOB_PROFILE_ID(FK) 


integer 




Y 


1000 


SUBMITTED_TIME 






Y 


(date and time) 


ACTIVATION_TIME 


date 




Y 


(date and time) 


EXPIRATI0N_T1ME 


date 




Y 


(date and time) 


ENTERPRISEJD(FK) 


integer 




Y 


1000 


LAST_MODIFIED 


timestamp 




Y 


(date and time) 



[0070] JOB_GROUP_ID: This is an in-house ID number con-esponding to a job group, and is used mainly for the 
internal database process. A unique JOB_GROUPJD is automatically generated for the J0B_GROUP table when a 
50 supervisor administrator prepares and registers a job group entry, 

[0071] JOB_GROUP NAME: This is the name of a job group. A pair consisting of a unique JOB_GROUP_NAME 
and a unique ENTERPRISEJD is entered In the JOB_GROUP table. 

[0072] JOB_GROUPJNFO: This is infomaatlon for a job group, and infomnation concerning, for example, an object 
for a job that is stored. The setting for the JOB_GROUPJNFO in this field is arbitrary. 
55 [0073] JOB_PROFILEJD: This represents the contents of a scheduled job, and indicates the JOB_PROFILEJD 
that Is stored in the JOB_PROFILE table. 

[0074] SUBMITTED_TIME: This is the date and time at which a job was registered. 
[0075] ACTIVATION_TIME: This is the date and time at which a job is executed. 
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[0076] EXPIRATION_TIME: This is the date and time at which a job wiil expired. 

[0077] ENTERPR1SE__ID: This represents a connpany to which a job group beiongs, and indicates the 
ENTERPRISEJD that is stored in the EISTTERPRISE tabie. 

[0078] LAST_MODIFIED: This is the latest date on which a job group was updated. 

5 

2-8. SUBMiTTED_JOB_EXT tabie 

[0079] A SUBMITTED_JOB_EXT table is used to con-eiate a job and a job group. Tabie 8 is an exampie 
SUBIVIITTED_JOB_EXT table. 

10 

Table 8 



Name 


Type 


Size 


Required 


Exampie 


JOB_iD(PK,FK) 


Integer 




Y 


1000 


JOB_GROUPJD (FK) 


Integer 




Y 


1000 



[0080] JOBJD: This indicates the JOBJD in the SUBMITTED_JOBS tabie In the DMS. A pair consisting of a unique 

JOBJD and a unique JOB_GR0UPJD is stored in the GR0UPED_JOBS tabie. 

[0081] JOB_GROUP_ID: This indicates the JOB_GROUPJD in the JOB^GROUP tabie. 

20 

2-9. DEViCE.EXT table 

[0082] A DEViCE_EXT table holds supplemental Infomriation forthe DEVICE table of the DUS. Table 9 Is an example 
DEViCE_EXT table. 

25 

Table 9 



Name 


Type 


Si2e 


Required 


Example 


DEVICEJD(PK,FK) 


long 




Y 


1000 


N_VALUE 


varchar 


32 


N 


"123-456r 


SERVICE_GROUPJD(FK) 


integer 




Y 


1000 


ENTERPRISEJD(FK) 


integer 




Y 


1000 



[0083] ' DEVICE.iD: This is a unique DEVICEJD that is stored In the DEVICE_EXT table and represents the DEVICE 
table in the DIVtS. 

[0084] N_VAHJE: This is a device management number managed by an enterpriser. 

[0085] SERVICE_GROUPJD: This represents a service group to which a device group belongs, and indicates the 
SERVICE_GROUPJD that is entered In the SERVICE_GROUP table. 

[0086] ENTERPRISE_ID: This represents a company to which a device group belongs, and indicates the 
ENTERPRISEJD that is entered in the ENTERPRISE table. 

2-10. DEVICE.GROUP table 

[0087] A DEVICE_GROUP table holds a list of device groups. Table 1 0 is an example DEVICE_GROUP table. 



Table 10 



Name 


Type 


Size 


Required 


Example 


DEVICE_GROUP_ ID(PK) 


long 




Y 


1000 


DEVICE_GROUP_ NAME 


varchar 


255 


Y 


"SE7, 6th floor, Hall B, Y branch, ABC Ltd." 


DEVICE_GROUP_INFO 


varchar 


512 


N 


...shimo-tsuruma, Yamato-shI 


SERVICE_GROUP JD(FK) 


integer 




Y 


1000 


ENTERPRISEJD (FK) 


integer 




Y 


1000 


U\ST_MODIFIED 


date 




Y 


(date and time) 
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[0088] DEVICE.GROUPJD: This is an in-house ID number corresponding to each device group, and is used mainly 
for the internal database process. A unique DEV1CE_GR0UPJD is automatically generated in the DEViCE_GROLIP 
table when a supervisor administrator prepares and registers a device group entry. 

[0089] DE\/ICE_GROUP_NAME: This is the name of a device group. A pair consisting of a unique 
5 DEVlCE_GROUP_NAME and a unique ENTERPRISEJD is stored in the DEVICE_GROUP table. 

[0090] DEVICE_GROUPJNFO: This is infomriation for a device group. The setting for the DEVICE_GROUP_lNFO 
in this field is arbitrary. 

[0091] SERViCE_GROUP_ID: This represents a service group to which a device group belongs, and indicates the 
SERViCE_GROUP_ID that Is stored in the SERVlCE_GROUP table. 
10 [0092] ENTERPRISEJD: This represents a company to which a device group belongs, and indicates the 
ENTERPRISEJD that is stored in the ENTERPRISE table. 

[0093] LAST_MODIFIED: This is the latest date and time at which a device group was updated. 
2-1 1 . GROUPED.DEVICES table 

15 

[0094] A GR0UPED_DEV1CES TABLE is used to correlate a device and a device group. Table 11 is an example 
GROUPED_DEVICES table. 



Table 11 



Name 


Type 


Size 


Required 


Example 


DEVICE_ID(FK) 


long 




Y 


1000 


DEVICE_GROUP_ID(FK) 


long 




Y 


1000 



[0095] DEVICE_ID: This indicates the DEVICE JD that is stored In the DEVICE table of the DMS. A pair consisting 
of a unique DEVICEJD and a unique DEVICE_GROUPJD is stored In the GROUP ED_DEVICES table, 
[0096] DEVICE_GROUPJD: This indicates the DEVlCE_GROUP_ID that is stored in the DEVICE_GROUP table. 
[0097] The database, including the above tables, is prepared so that the system can be operated. Arbitrary elements 
are included in the elements In these tables, and are not requisite for the present invention. Further, other arbitrary 
elements can also be added. 



3. System function 



[0098] The functions carried out by the system will now be described. Fig. 5 is a diagram showing the processing 
pert omried when the supervisor management console issues a request to a device management server and the server 
responds to this request. The processing request from the console is shown on the left in Fig. 5, and the contents of 
the processing perfomned by the management server (console manager) are shown on the right. Fig. 6 is a diagram 
showing the processing perfomned when the general management console issues a request to the device management 
server and the server responds to this request. The processing request from the console is shown on the left in Fig. 
6, and the contents of the processing performed by the management server (console manager) are shown on the right. 
Fig. 7 is a diagram showing the processing performed when the device of an end user issues a request to the device 
management server and the server responds to this request. The processing request from the device is shown on the 
left in Fig. 7, and the contents of the processing perfomned by the management server (device manager) are shown 
on the right 

[0099] When the functions of the system are implemented, the communication contents of the management console 
are roughly sorted into the following two types. The first type is a database search/update request (command) fonvarded 
to the console manager, and the second type is the uploading of a file to be distributed to the devices. The first type 
can be issued as an XML command, while an HTML POST command can be used for the second type. Details, such 
as the format defined in an XML command and the contents and the uploading of a file using an HTML POST command, 
are well known to one having the ordinary skill in the art. Furthemnore, functions such as data compression , compatibility 
with NLS, divided transmission (reception) for huge amounts of data and partial re-transmission, and the encryption 
of private infomiation (an administrator password, etc.) for each company, can b© additionally provided for communi- 
cations that employ this system. 

[0100] A detailed explanation will now be given for the processing perfomned by the consoles or the devices and the 
management server 
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3-1 . Administrator verification 

[0101] The administrator verification function is a function used to detemnine whether a person who is to use the 
supervisor management console or the general management console is an authorized administrator. The console 

5 manager will not accept a request from a non-authorized administrator, so when a log-in occurs at the supervisor 
management console 4 or the general management console 9 (step 30), the console 4 or 9 transmits, to the server 2 
(console manager 3), the enterprise ID in a setup file along with the administrator ID and password that are input at 
the time of the log-in (step 31). This communication process is perfomned in a handshaking manner using SSL. The 
console managers perfomns a legality examination (verification) (step 32), and transmits a log-in response (step 33). 

10 [0102] The verification of the administrator is perfomned by examining an ENTERPRISE table 34 and an ADMINIS- 
TRATOR table 35 in the database. When the administrator has been verified, the console manager 3 stores the en- 
terprise ID and the administrator ID in con-elation with the session, and notifies the console 4 or 9 that the processing 
was completed successfully (step 33). Thereafter, for a request received from the console, legality can be datenmined 
by examining the ID that is correlated with the session. Thus, the resource access can be controlled. The access right 

15 is provided for each company, and the verification is valid during the same session. When the verification processing 
is not successful, or when the request has been issued by an unauthorized person, the console manager 3 temninates 
the session and severs the communication connection. To provide session management, a verification ticket with an 
expiration time is issued to the management console 4 or 9 at the time of the log-in, and thereafter the verification 
ticket is used as a session ID. 

20 

3-2. Management of a company 

[0103] Company management can be perfonned only by the supervisor management console (supervisor operation). 
The console manager 3 detemnines whether a supervisor flag is "true" in order to detemnine whether a request has 
25 been issued by the supervisor management console 4. The supervisor flag is transmitted to the console with.the log- 
in response. 

[01 04] To add a company (step 36), the console nrianager receives a company addition request 37 from the console 
and makes an entry in the ENTERPRISE table 34 (step 38). The companies of the enterprisers are preset in advance 
when they are introduced, and an enterpriser can not be added. The identification names that are provided for the 
30 companies and that are distributed to the administrators of the companies must match those stored in the database. 
After completing the addition process, the console manager 3 transmits an OK response to the supervisor management 
console 4 (step 39). 

[0105] To delete a company, an entry is deleted from the ENTERPRISE table. At this time, all associated entries, 
such as those for an administrator, a device group, a device, a job group, a job and a job profile, must also be deleted. 
35 It should be noted that the company of an enterpriser can not be deleted. To change the attribute of a company, an 
entry in the ENTERPRISE table is altered. It should be noted that a list of companies is compiled by referring to the 
ENTERPRISE table, 

3-3. Management of administrators 

40 

[0106] The management of administrators, as well as the management of companies, Is a supervisor operation. It 
should be noted, however, a general administrator is permitted to perfomn one part of this operation. 
[0107] To add an administrator (step 40), an entry is added to the ADIWINISTRATOR table. In the same manner as 
is described above, a request is transmitted to the server (console manager), and the server rewrites the database in 
45 accordance with the request. At least one supervisor administrator is pr^et in advance at the time of introduction. 
[0108] To remove an administrator, an entry in the ADMINISTIWOR table must be deleted. A deletion operation in 
whch all of the supervisor administrators are deleted can not be perfomned. 

[0109] To change the attribute for an administrator, an entry in the ADMINISTRATOR table is altered. A supervisor 
administrator can change the administrator password and the administrator infomiation for an artaitrary administrator, 
50 but a general administrator can change only his or her password. 

[01 10] A list of administrators is compiled by referring to the ADMINISTRATOR table and the ENTERPRISE table. 

3-4. Switching companies 

55 [01 1 1] Upon the receipt of a request from the supervisor management console 4, the console manager 3 can switch 
companies by changing the enterprise ID (step 41). 
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3-5. Device management 

[01 12] In principle, device management is supervisor management, but a general administrator Is pemnitted to per- 
fomn one part of the management process. 
5 [01 13] The addition of a device (step 42) is a supervisor operation . To add a device, an entry is made in the DEVICE 
table (recorded in the device management database 1 9) in the DMS. and at the same time, a corresponding entry is 
made in the DEVICE_EXT table 44. 

[0114] The deletion of a device Is also a supervisor operation. To delete a device, an entry is removed from the 
DEVICE table in the DMS, and at the same time, a corresponding entry is removed from the DEViCE_EXT table. 
10 [0115] To change the attribute of a device (supervisor operation), an entry in the DEVICE table or DEVICE_EXT 
table in the DMS is altered. 

[0116] A list of devices Is complied by referring to the DEVICE table, the DEVICE_EXT table and the 
GROUPED_DEVICES table in the DMS. All the devices belonging to a specific device group can be Included in such 
a list. 

IS [01 17] To group the devices, an entry Is made In the GROUPED_DEVICES table. The devices to be grouped must 
belong to the same company and to the same service group. So when device groups are to be prepared, first, the 
devices in a company are listed and then they are sorted into groups. 

[01 18] The service group is a necessary concept when the grouping of devices Is tai<en into account. The service 
group has two aspects. One aspect is that the service group represents the frame (base) of a service an enterpriser 
20 provides individual companies. For example, the enterpriser can set up a service group that includes a service 1 and 
a service 2, and the member companies can add their unique contents to the services 1 and 2. The other aspect is 
that, since the devices are correlated with the service groups, it Is guaranteed that a specific device will be capable of 
receiving services included in the service group. 

25 3-6. Management of device groups 

[01 19] To add a device group, an entry is made in the DEViCE_G ROUP table. And to delete a device group, an entry 
Is removed from the DEVICE_GROUP table, while at the same time, a con^esponding entry Is removed from the 
GROUPED_DEVICES table. To change the attribute of a device group, for which the only changeable attribute is the 
30 device group name, an entry in the DEVICE_GROUP table Is altered. A list of device groups is compiled by refenring 
to the DEVICE_GROLJP table and the GROUPED_DEVICES table. All the device groups to which a specific device 
belongs, or all the devices that belong to a specific device group, can be compiled to form a list. 

3-7. Job management 

35 

[0120] For the consoles 4 and 9 and the console manager 3, the service Is mapped into the concept "job" in the 
DMS. In the DMS, one job is prepared for one device. A job can be scheduled for each device orfor each device group, 
and in either case, the scheduling for a job is perfonmed at the device level, the overlapping of devices is eliminated, 
and a group of jobs for a device group Is added as an entry in the JOB_GROUP table. Thereafter, the job for the device 
40 group is referred to by using the job group name. The SUBMITTED_JOB_EXT table provides the con-elation of the 
SUBMITTED_JOB table In the DMS with a job group, and a necessary value is set in the fields for the 
SUBMITTED_JOBS table In the DMS and for the JOB_PARMS table. 

[01 21 ] A Job can be canceled for each job group, and can also be canceled for each device. When a job is canceled, 
a corresponding entry is removed from the database. This job deletion operation by the DMS is the only one in which 
45 an entry is deleted from the database, and a job that is currently being executed can not be deleted. Even thought the 
attribute of a job can be changed by altering the SUBMnTED_JOB table in the DMS. 

[0122] A list of jobs can be conrrpiled by refeningto the SUBMITTED_J OB table in the DMS, the JOB_COMPLETION 
table, the SUBMITTED_JOB_EXT table and the JOB_GROUP table. Then, the statuses of all the jobs belonging to a 
specific job group can be obtained. In this case, the jobs can be filtered using the status and the date, and a list of the 
50 job groups to which a specific job belongs can be obtained. 

3-8. Management of job profiles 

[0123] To add a job profile, an entry is made in to the JOB_PROFILE table. But before a job profile is added, asso- 
55 elated software must be uploaded and the software infonmatlon must be stored in the SOFTWARE table In the DMS. 
The servlet of the console manager 3 Is responsible for the uploading of the software. 

[01 24] To delete a job profile, an entry is removed from the JOB_PROFILE table, while associated software Is deleted 
and a conresponding entry Is removed from the SOFTWARE table. However, when a job issued by a specific 
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JOB_PROFILE is present in the database, the job profile can not be deleted. 

[0125] To change an attribute for a job profile, an entry for the only alterable attribute in the JOB_PROFILE table, 
the job profile nanne, is altered. A list of job profiles can be compiled by referring to the JOB_PROFILE table and the 
SERVICE table. 

5 

3-9. Uploading a job resource 

[0126] Software distributed to a device must be uploaded before a job is scheduled, and the console manager 3 
must process a request from the management console to upload a job resource. A job resource is, for example, software 

10 (an image, a document, a program, etc.) to be distributed, a package definition file in which software to be distributed 
and a setup are written, or a package consisting of a collection of the above described software and a definition file. 
[01 27] As is shown In Rg. 6, a package file Is prepared by the company (step 45), and in accordance with a request 
for the preparation of a tasktemplate (step 46), an upload directory Is created for each company (step 47). Subsequently, 
each company can access only its own directory under the control of the console manager 3. The upload destination 

15 is, for example, the following directory. 
/jobres/J001 

wherein "/jobres" denotes the parent directory of all the company resource directories. The path to the directory 
of the company resource, including the above directory name, is set up by the console manager servlet based, for 
example, on the identification name obtained from the database. When multiple DMS servers are employed, Yjobres" 
20 and the following directories must be mounted in another machine in the NFS. 

[0128] A package file and a resource file are uploaded from the console to the above directory (step 48), and upon 
the receipt of a task template commit request (step 49), the server prepares a task template (step 50) and stores it in 
the JOB_PROFILE table. 

25 3-1 0. Processing for a request issued by a device 

[0129] As Is shown in Fig. 7, the device Issues a job inquiry to the device manager of the DMS (step 51), and the 
servertransmits a notification of the presence/absence of a job (step 52). If there is no job, the processing Istenninated. 
But when there Is a Job, the device issues a job infomnation transmission request to the server (step 53), and upon the 

30 receipt of this request, the servertransmits the job information (step 54). Thereafter, when the server receives a job 
start request (step 55), it issues a job start notification (step 56). Then, if a continuation request is received from the 
device, the sender continues to execute the job until it has been completed (step 57). Subsequently, when the device 
receives a job end notification, it issues a completion notification (step 58), and after the device receives an acknowl- 
edgment that the completion notification has been received, the processing is terminated. 

35 [0130] When the above described processing is perfomned, In accordance with the system of this embodiment, a 
unique service can be provided for a device administered by a company, and since the company can entrust the server 
management to an enterpriser, a service answering to a large variety of needs can be provided at a low cost. Further, 
as is described above, devices managed by a general management console 9 are limited to those for which manage- 
ment if provided by their own company, and devices for which management is provided by other companies can not 

40 be controlled. That is, a device managed by a company can not be controlled by the console of another company. 
Therefore, one DMS can be shared by multiple companies. Furthemnore, when an open network, such as the Intemet, 
is employed, security is not deteriorated because the system of the invention provides for the verification not only of 
an enterprise ID but also of an administrator. 

[0131] The present invention has been specifically explained by using the embodiment; however, the invention is 
45 not limited to this embodiment, and can be variously modified without departing from the scope of the Invention. For 
example, in this embodiment, as management levels, the system employs three layers: a device that constitutes an 
end user, a management console for a company, and the supervisor management console of an enterpriser. However, 
additional layers can be set as management levels. For example, an enterpriser may be controlled by another, higher 
enterpriser, or a device managed by a company may control another device located within the range controlled by the 
50 company. 

[01 32] According to this specification, companies are employed as example general administrators, but other groups, 
such as public agencies, schools or non-profit organizations, may also be employed. The temri "company", as used in 
this, specif cation, includes the concept of "public agencies, schools, non-profit organizations and other such groups". 
[0133] The typical effects obtained by the Invention disclosed in this application are as follows. Since only a man- 
55 agement console must be installed In a company, the company Is relieved of Its responsibility for providing for the 
complicated operation of a management sen/er. And since the fee that an ISP may charge for providing a device 
management servfce for multiple companies can be split among the relevant companies, the expense incun'ed by each 
company can be reduced. 
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[0134] Further, since muitiple companies can share the same device management server and database server, and 
can receive a service, such as the distribution of software or the setting of devices, only the respective devices that 
are managed are affected. Therefore, the device setting is inhibited and is not perfonned for devices that are managed 
by other companies. 

5 [0135] Furthemfiore, the security between a management console and a management server is strengthened, so 
that the operation of a management console via an external network Is possible. 



Claims 

10 

1 . A network system for using a device management server to manage devices connected to a computer network, 
comprising: 

general management consoles connected to the computer network; 

15 

a supervisor management console accessible by the device management server; 

a database, connected to the device management server, which includes enterprise data associated with each 
of the general management consoles and the device data associated with the enterprise data for each of the 
20 devices; 

a console manager for the intemriediate transfer of data between the general management consoles or the 
supervisor management console and the database; and 

25 means for refening to the enterprise data and the device data to permit the general management consoles to 

offer a service for the devices, or an associated group thereof. 

2. The network system according to claim 1 , wherein a profile data associated with the service Is included in the 
database; and wherein the console manager includes means for pemnitting the general management consoles to 

30 register, change, schedule or delete a service and to access the profile data. 

3. The networit system according to claim 2, wherein job data associated with the profile data is included in the 
database; and wherein the network system further comprises means, when the devices are connected to the 
device management server, for searching for data and for requesting services associated with the devfce data 

35 available at the devices. 

4. The network system according to any one of claims 1 to 3, wherein management data associated with each of the 
general management consoles is Included in the database; and wherein there is further included means for, when 
the general management console logs in the device management server, examining an administrator using the 

40 enterprise data and the management data. 

5. The network system according to any one of claims 1 to 4, further comprising: 

means for permitting the supervisor management console to access, register, change or delete device data 
45 associated with all the devices, enterprise data, management data, profile data or job data. 

6. A device management method, for a networtc system that comprises devices connected to a computer network, a 
device management server to manage the devices, general management consoles connected to the computer 
network, a supervisor management console accessible by the device management server, a database which is 

50 connected to the device management server and which includes enterprise data associated with each of the gen- 

eral management consoles and the device data associated with the enterprise data for each of the devices, a 
console manager forthe intennediate transfer of data between the general management consoles or the supervisor 
management console and the database, the device management method comprising steps of: 

55 the general management consoles issuing a connection request to the devtee management server; 

the console manager obtaining infomnation, including enterprise IDs for the general management consoles, 
and searching the enterprise data to verify the general management consoles; and 
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the verified general management consoles receiving permission to offer and offering a service to individual 
devices, or a group thereof, at which device data is avaiiabie which is associated with the enterprise data, and 
which devices are designated by the enterprise IDs. 

5 7. The device management method according to claim 6, wherein a profile data associated with the service is included 
in the database; and wherein the general management consoles that are verified are pemiitted to register, change, 
schedule or delete a service and to access the profile data. 

8. The device management method according to claim 7, wherein job data associated with the profile data is included 
10 in the database; wherein there are further included the steps of 

connecting the devices to the device management server, 

searching for the job data, and 

15 

requesting services associated with the device data available at the devices. 

9. The device management method according to any one of claims 6 to 8, wherein management data associated 
with each of the general management consoles is included in the database; and wherein there are further included 

20 the steps of: 

the general management console logging in the device management server, 
examining an administrator using the enterprise data and the management data. 

25 

10. The device management method according to any one of claims 6 to 9, wherein the supervisor management 
console is penmitted to access, register, change or delete device data associated with all the devices, enterprise 
data, management data, profile data or job data. 

30 1 1 . A system for managing devices connected to a computer network comprising: 

a device management server connected to the computer network; 

a supervisor management console accessible by the device management server; 

35 

a database, connected to the device management server, which includes enterprise data associated with each 
of the general management consoles and the device data associated with the enterprise data for each of the 
devices; 

40 a console manager for the intermediate transfer of data between the general management consoles connected 

to the computer network or the supervisor management console and the database; and 

means, responsive to receipt of connection requests from the general consoles, for referring to the enterprise 
data and the device data to permit the general management consoles to offer a service for the devices, or an 
45 associated group thereof. 

12. The system according to claim 11 , wherein a profile data associated with the service is included in the database; 
and wherein the console manager includes means for pennitting the general management consoles to register, 
change, schedule or delete a service and to access the profile data. 

50 

13. The system according to claim 12, wherein job data associated with the profile data is included in the database; 
and wherein the networic system further comprises means, when the devices are connected to the device man- 
agement server, for searching for data and for requesting services associated with the device data available at 
the devices. 

55 

14. The system according to anyone of claims 11 to 13, wherein management data associated with each of the general 
management consoles is Included in the database; and wherein there is further included means for, when the 
general management console logs in the device management server, examining an administrator using the enter- 
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prise data and the management data. 

15. The system according to any one of claims 11 to 14, further comprising: 

means for pemiltting the supervisor management console to access, register, change or delete device data 
5 associated with all the devices, enterprise data, management data, profile data or job data. 

16. A data processing method using a device management system that comprises a device management server to 
manage devices connected to a computer network, a supervisor management console accessible to the device 
management server, a database, connected to the device management server, that includes enterprise data as- 

10 sociated with each of the general management consoles and the device data associated with the enterprise data 

for each of the devices, and a console manager for the Intermediate transfer of data between the supervisor man- 
agement console, or general management consoles connected to the computer network and the database, the 
data processing method comprising steps of: 

15 upon receipt of connection requests from the general management consoles, the console manager obtaining 

infonnation, including enterprise IDs for the general management consoles; 

searching the enterprise data to verify the general management consoles; and 

20 the verified general management consoles receiving permission to offer, and offering a sen/ice to individual 

devices, or a group thereof, whereat device data are available that are associated with the enterprise data, 
which are designated by the enterprise IDs. 

17. A computer program for controlling the operation of a data processing apparatus on which it tuns to perfonn the 
25 steps of: 

upon receipt of connection requests from general management consoles connected to a computer network, 
obtaining infomnatlon including enterprise IDs from the general management consoles; 

30 searching the enterprise data of a database connected to the device management server to verify the general 

management consoles; 

searching for devces, or a group thereof, whereat device data are available that are stored in the database 
and are associated with the enterprise data, which are designated by the enterprise IDs; and 

35 

pemnitting the verified general management consoles to offer a service to the devices or the group thereof. 

18. An Internet service provision method comprising the steps of: 

40 pemnitting a first console, belonging to a first enterprise, to provide a service for a first devce group connected 

to the Intemet; and 

pemnitting a second console, belonging to a second enterprise, to provide a service for a second device group 
connected to the Intemet. 

45 
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